The Spy in the Middle: Are SSL certificates even more broken than we thought?
<b>Crypto.com:</b> "A decade ago, I observed that commercial certificate authorities protect you from anyone from whom they are unwilling to take money. That turns out to be wrong; they don't even do that."